NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FW1] FW-1/StoneBeat State SYNC



Hi, I had a problem where one of out stone beat fw-1 nodes took down our
network.
It appeared that the transfer of the connection state table information was
not occuring between the private interfaces.
I redid the putkeys and the errors stopped in fwd.elg(log below)
Has anybody ever experienced this? Does one need to do putkeys between the 2
firewall nodes or just
fw's modules <--> managemnet server?

How does one prevent this? I am aware of the putkey authenication problems
and that checkpoint is adressing them.
The cluster has worked fine for many months.

Thanx
Eric Appelboom
South Africa

fwd: Connected to Sync Server 192.168.0.1
fwd: fwd : starting old sync client
fwd: Got Sync Connection from 192.168.0.1
fwd: Resyncing 1 firewall.
fwd: End Sync Connection from 192.168.0.1
fwd: Got Sync Connection from 192.168.0.1
fwd: Sync Server 192.168.0.1 went down
fwd: Connected to Sync Server 192.168.0.1
fwd: Sync Server 192.168.0.1 went down
fwd: Connected to Sync Server 192.168.0.1
fwd: Sync Server 192.168.0.1 went down
fwd: Connected to Sync Server 192.168.0.1
fwd: Resyncing 1 firewall.
fwd: End Sync Connection from 192.168.0.1
fwd: Got Sync Connection from 192.168.0.1
fwd: Resyncing 1 firewall.
fwd: End Sync Connection from 192.168.0.1
fwd: Got Sync Connection from 192.168.0.1
fwd: Log Server 192.168.0.3 went down
fwd: FW: Received new control security key from 192.168.0.3 <-
re-established authentication
fwd: logsys_add_connection_packet_e: recursive call, return
fwd: FireWall-1 daemon going to die on sig  15              <- restart
firewall module
fwd: Sun May  6 13:38:56 2001

fwd: FireWall-1 server is running
fwd: fwd : starting old sync client
fwd: Got Sync Connection from 192.168.0.1      <- fw-1 management server
module restarted
fwd: Connected to Sync Server 192.168.0.1      <-last message sunday morning
11h00
serra-angel#


Eric Appelboom
M-Web Security



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.